47a886aff49da079866be659e2b5e108 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47a886aff49da079866be659e2b5e108
Size

316KB
MD5

47a886aff49da079866be659e2b5e108
SHA1

2fd7569084826fecdcd07c451bfeaf455c4d196c
SHA256

e8da75414743ccda35d0f03aefe92d53f48ce4f7beb6c99a30188198f4209885
SHA512

b2b9b730b1b88407b2109e542f6de7d4752c35f0d2d7b6f3b788e6945834cae83d2ec25b745486da659be50a5b237c0755e7879717f6eb596a7142570a3b8001
SSDEEP

6144:o8BmLHC9+7SxhjmqsfGCIUZXiwRlDzgnJOGHhZ9al5YgvysriJOh:o6h5mf3I2iwDzgn3Y5h6sriJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47a886aff49da079866be659e2b5e108

Files

47a886aff49da079866be659e2b5e108
.exe windows:4 windows x86 arch:x86

b568390a6e2836723fed55f4fc2f617c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetSystemDirectoryA
VirtualProtect
ResetEvent
InterlockedExchange
GetLocaleInfoA
GetLastError
FindFirstFileA
ReleaseMutex
RaiseException
Sleep
SetErrorMode
GetLogicalDrives
CloseHandle
SetEvent
EnterCriticalSection
GlobalFree
GetACP
GetCommandLineA
LoadLibraryExA
HeapCreate

user32

wsprintfA
IsIconic
FrameRect
EndPaint
GetCursorPos
DrawTextA
ValidateRect
BeginPaint
GetWindow
FillRect
GetWindowTextA
GetClassNameA
FlashWindowEx
SetForegroundWindow
GetFocus
GetActiveWindow
ReleaseDC
ShowWindow
GetParent

httpapi

HttpAddUrl
HttpAddFragmentToCache
HttpTerminate
HttpCreateHttpHandle
HttpInitialize

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ